Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/N2Wucva-XgasQYCHMQEHsJSueeY.roa
File:                     N2Wucva-XgasQYCHMQEHsJSueeY.roa (raw, json)
Hash identifier:          JxB5bvUaG+dL5qk7BCrIWmSMNu+N6x6aAJfHvB25hLE=
Subject key identifier:   37:65:AE:72:F6:BE:5E:06:AC:41:80:87:31:01:07:B0:94:AE:79:E6
Certificate issuer:       /CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
Certificate serial:       018811C394CA5F203D2A1B3289BBEA707E88
Authority key identifier: 14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/N2Wucva-XgasQYCHMQEHsJSueeY.roa
Signing time:             Fri 12 May 2023 21:00:10 +0000
ROA not before:           Fri 12 May 2023 21:00:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203701
IP address blocks:        62.106.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:11:c3:94:ca:5f:20:3d:2a:1b:32:89:bb:ea:70:7e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
        Validity
            Not Before: May 12 21:00:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3765ae72f6be5e06ac418087310107b094ae79e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:49:5b:31:44:0e:87:f0:34:19:5d:aa:c7:
                    48:98:0f:c4:90:e5:ff:a6:57:37:c3:42:90:38:19:
                    08:a4:58:fc:be:63:68:82:5c:ef:c5:5c:a0:84:75:
                    df:b8:0c:38:39:88:65:53:af:ec:9e:03:4b:fc:ab:
                    0e:ad:9d:6d:fe:b8:2e:dd:71:57:4e:09:12:cc:10:
                    39:d4:c6:51:05:73:9a:6a:c3:2f:18:3b:a5:6b:dd:
                    92:e8:54:39:1e:1e:6b:d8:98:f7:36:7d:06:55:b7:
                    ba:68:67:d1:bf:c7:10:22:27:3d:be:c0:ef:2b:25:
                    fe:a0:f6:61:88:7a:06:79:08:86:7c:e5:28:bb:4d:
                    02:79:bb:d8:59:45:8a:e4:8d:2c:3b:cb:d9:64:57:
                    31:28:fc:f8:d7:79:82:f9:24:7a:ab:01:95:3c:91:
                    e6:e2:65:16:bb:1e:f1:f3:6f:e4:ea:c3:68:aa:a6:
                    bf:5a:6a:e0:eb:d2:84:2c:65:ed:3b:d0:fe:7c:60:
                    67:d7:7f:be:83:e1:60:1d:f1:46:bf:03:1d:40:7e:
                    fe:ef:4b:e6:eb:b4:4f:c5:c5:9e:01:33:ef:c8:04:
                    99:ab:0d:7a:14:2c:b4:a6:c3:5b:c8:51:34:54:ce:
                    f0:96:24:5b:32:25:65:55:2d:5c:b0:11:ae:f7:ee:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:AE:72:F6:BE:5E:06:AC:41:80:87:31:01:07:B0:94:AE:79:E6
            X509v3 Authority Key Identifier:
                keyid:14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/N2Wucva-XgasQYCHMQEHsJSueeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:08:c0:2f:df:c4:3d:5c:cf:e4:bb:dd:a2:8b:fe:4d:46:
         86:9f:2c:ad:8e:6f:66:9a:2d:76:8c:22:32:da:bb:83:f1:49:
         d8:21:1f:1b:29:f2:42:2d:f4:7e:16:0b:aa:9f:0c:f7:1a:20:
         92:07:d0:5a:76:ae:0e:31:7f:05:bc:88:39:9e:dd:24:5d:a0:
         4f:d2:2e:c4:35:9b:0e:de:b9:39:93:56:4a:8c:a0:ce:0c:2a:
         55:36:71:eb:67:0f:20:9f:11:06:49:b7:a1:90:99:1d:ab:6a:
         50:3e:97:48:a7:27:27:e8:69:fc:7d:dd:07:9a:3b:01:30:79:
         52:52:b5:89:cc:aa:f0:23:93:ca:23:a7:c2:dd:dc:f9:1a:9e:
         b5:63:b9:82:d5:b9:e1:eb:12:9b:6f:e3:aa:48:2f:c1:4e:6b:
         30:5d:20:40:5d:52:73:d5:7a:39:3b:a2:b7:80:e2:17:87:09:
         ee:f1:16:6b:6c:50:58:01:b7:fc:7d:ee:8f:fe:9a:73:ca:8d:
         7a:83:56:16:0e:04:dd:89:2f:cd:66:95:2e:86:ca:01:be:17:
         0b:12:1d:96:41:68:c6:21:32:87:c9:a5:98:65:56:23:f6:33:
         23:ba:da:e3:2f:34:24:c3:7a:8b:c3:f1:d4:38:33:7a:88:e2:
         de:4c:ed:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgRw5TKXyA9KhsyibvqcH6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGNjY2U3MjI0ZGE5OWNiYzU0MzNkYTQxY2ZkNTgyZmE2
MGQzYjYwHhcNMjMwNTEyMjEwMDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY1YWU3MmY2YmU1ZTA2YWM0MTgwODczMTAxMDdiMDk0YWU3OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAJJWzFEDofwNBldqsdImA/EkOX/
plc3w0KQOBkIpFj8vmNoglzvxVyghHXfuAw4OYhlU6/sngNL/KsOrZ1t/rgu3XFX
TgkSzBA51MZRBXOaasMvGDula92S6FQ5Hh5r2Jj3Nn0GVbe6aGfRv8cQIic9vsDv
KyX+oPZhiHoGeQiGfOUou00CebvYWUWK5I0sO8vZZFcxKPz413mC+SR6qwGVPJHm
4mUWux7x82/k6sNoqqa/Wmrg69KELGXtO9D+fGBn13++g+FgHfFGvwMdQH7+70vm
67RPxcWeATPvyASZqw16FCy0psNbyFE0VM7wliRbMiVlVS1csBGu9+5hOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdlrnL2vl4GrEGAhzEBB7CUrnnmMB8GA1UdIwQY
MBaAFBRMzOciTamcvFQz2kHP1YL6YNO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkV6TTV5Sk5xWnk4VkRQYVFjX1ZndnBnMDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wZDgxNGYtZDlmNy00ZDY4LThiZmMt
M2ExYzI1ZDgzMTA1LzEvTjJXdWN2YS1YZ2FzUVlDSE1RRUhzSlN1ZWVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wZDgxNGYtZDlmNy00ZDY4LThiZmMtM2ExYzI1ZDgzMTA1
LzEvRkV6TTV5Sk5xWnk4VkRQYVFjX1ZndnBnMDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpWMA0G
CSqGSIb3DQEBCwUAA4IBAQAfwAjAL9/EPVzP5Lvdoov+TUaGnyytjm9mmi12jCIy
2ruD8UnYIR8bKfJCLfR+Fguqnwz3GiCSB9Badq4OMX8FvIg5nt0kXaBP0i7ENZsO
3rk5k1ZKjKDODCpVNnHrZw8gnxEGSbehkJkdq2pQPpdIpycn6Gn8fd0HmjsBMHlS
UrWJzKrwI5PKI6fC3dz5Gp61Y7mC1bnh6xKbb+OqSC/BTmswXSBAXVJz1Xo5O6K3
gOIXhwnu8RZrbFBYAbf8fe6P/ppzyo16g1YWDgTdiS/NZpUuhsoBvhcLEh2WQWjG
ITKHyaWYZVYj9jMjutrjLzQkw3qLw/HUODN6iOLeTO3Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org